Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Limit number of rules/objects affected by action #684

Open
bethatasitmay opened this issue Oct 21, 2022 · 0 comments
Open

Limit number of rules/objects affected by action #684

bethatasitmay opened this issue Oct 21, 2022 · 0 comments
Labels
enhancement New feature or request

Comments

@bethatasitmay
Copy link

Is your feature request related to a problem?

It would be helpful to be able to limit the amount of data returned from an action.

Describe the solution you'd like

I would like to be able to limit the amount of data returned from actions. For example, I'm running exportToExcel action right now to identify rules older than 1 year (using timestamp-last-hit.fast filter). It is returning over 2,000 rules (and correctly so). I don't want to work on 2,000 rules right now - I'd like to limit the number of returned rules and work on that smaller set (in this case tag & disable them).

Describe alternatives you've considered

Run an action to tag the rules returned by the filter and then manually add another tag for the rules I want to work on. Since I would be working on 100-150 rules out of the 2,000 it's not a huge task but it still takes time.

Additional context

We need to remove stale rules but we don't need to do all of them every year. We just need to show that we are annually reviewing rules and removing at least some stale rules.

@bethatasitmay bethatasitmay added the enhancement New feature or request label Oct 21, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
None yet
Development

No branches or pull requests

1 participant